-
Notifications
You must be signed in to change notification settings - Fork 74
Open
Description
MinIO recently made the decision to make its public repository a "source only" distribution:
- Docker release? minio/minio#21647 (comment)
- https://github.com/minio/minio?tab=readme-ov-file#source-only-distribution
This means the MinIO official docker image will no longer be updated.
To add insult to injury, shortly after MinIO made the decision to stop publishing docker images, a high severity (8.1/10) CVE was disclosed and patched, meaning the official docker images are susceptible to the attack.
Privilege Escalation via Session Policy Bypass in Service Accounts and STS
While the CVE is probably not terribly impactful for a module that's intended for local testing, it is indicative of the types of issues that could continue to crop up if the MinIO image remains pointed to the official Docker repository.
Metadata
Metadata
Assignees
Labels
No labels